Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File:                     iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier:          c7JXBVDBXpJffLCgtQiASUUZSqgnm7uF1j9YF8ZI1kE=
Subject key identifier:   1D:ED:EA:83:14:E5:12:AC:E6:88:FF:52:99:F3:8C:22:2E:C8:C0:E1
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer:       /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial:       01A1860857414A6849F8994E8C4DBEB1CF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number:          02CA
Signing time:             Thu 29 Oct 2026 05:00:55 +0000
Manifest this update:     Thu 29 Oct 2026 05:00:55 +0000
Manifest next update:     Fri 30 Oct 2026 05:00:55 +0000
Files and hashes:         1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
                          2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: wU1XgUIWcjS1FOPoUC/z0x9NKJTHlCXqhhcOZs1v260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:08:57:41:4a:68:49:f8:99:4e:8c:4d:be:b1:cf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
        Validity
            Not Before: Oct 29 05:00:55 2026 GMT
            Not After : Oct 30 05:00:55 2026 GMT
        Subject: CN=1dedea8314e512ace688ff5299f38c222ec8c0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:e0:4d:29:22:07:46:71:01:7b:c6:95:60:
                    67:de:b2:e1:42:f3:be:d4:9d:bb:b1:2c:cb:a0:2e:
                    94:9a:76:cc:39:e2:cf:f5:d9:59:9f:73:b5:27:0e:
                    3b:58:24:c6:f8:38:76:d0:33:17:c1:80:00:26:1f:
                    a9:61:20:cf:24:5f:9c:57:8e:6d:7f:bf:37:4f:98:
                    88:0a:e3:5c:88:35:60:6f:11:9b:21:83:4f:6d:5b:
                    45:eb:b7:42:83:a0:c3:7e:77:15:2b:69:ce:70:ac:
                    b9:b5:dc:32:b2:5c:1a:49:d4:9a:cf:a5:23:55:e5:
                    e7:87:c7:86:10:35:c5:9d:4c:b3:54:85:f6:a9:81:
                    d6:f6:1e:75:0d:1b:18:f4:ce:1a:0b:6c:74:df:ca:
                    05:70:7a:f2:fa:3a:cf:cc:0b:c4:b1:06:04:36:1a:
                    20:37:78:ec:26:3f:25:89:46:5c:ca:bd:fc:5b:73:
                    eb:6b:eb:5d:29:4a:f9:a1:ad:e0:ed:fe:af:3d:cb:
                    6a:13:ba:a1:40:9e:01:18:70:3a:a8:b6:30:bb:a8:
                    85:9f:ff:4c:35:42:9d:11:bc:29:80:71:c2:25:2d:
                    12:84:84:83:63:de:85:fe:4e:64:b4:50:f4:db:51:
                    ed:04:12:85:88:58:ff:96:fd:9a:a1:10:91:0f:81:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:ED:EA:83:14:E5:12:AC:E6:88:FF:52:99:F3:8C:22:2E:C8:C0:E1
            X509v3 Authority Key Identifier:
                keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:24:6a:06:dc:00:ad:9c:8d:bd:7d:76:00:8b:fb:1d:9f:c4:
         50:35:bb:bd:d1:b0:3e:39:f5:61:aa:a6:b6:12:d4:91:b5:28:
         1d:21:ea:4d:81:dd:31:de:c7:7c:9e:ac:db:f3:8e:60:c9:ce:
         0a:f2:4b:4c:37:6c:58:86:5f:ba:2c:6e:a2:5b:ea:22:3b:17:
         ba:03:8d:59:e7:ed:93:f4:61:59:40:ae:c1:6f:ee:3b:e8:15:
         03:8e:78:c5:09:84:b7:1e:d6:8e:fb:d0:5b:79:06:e7:44:68:
         a3:17:91:ca:7c:00:e4:14:b9:63:af:6f:e8:cb:73:6d:ae:f8:
         b6:75:46:71:1b:ea:2f:19:37:a9:0a:da:17:5b:1d:4d:f3:ef:
         6a:1a:58:45:b3:15:2f:15:a4:28:3a:5f:e1:af:81:16:d9:33:
         8a:f4:ec:db:2e:66:90:bd:e7:d6:cb:aa:01:d2:43:99:98:8d:
         b5:f8:c6:fb:53:ce:2d:44:a4:3f:8b:11:19:a8:db:55:79:79:
         76:97:f7:b4:3b:9f:7f:81:ca:24:d8:18:09:2c:b2:2d:fe:a7:
         f6:a7:83:28:ef:dc:9e:af:0d:b1:97:25:e7:f5:a9:f9:5a:64:
         5f:2b:89:f2:e3:f3:72:87:5d:04:8f:96:1a:5e:cd:a2:79:6c:
         01:c9:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:48 2026 by rpki-client